BaselineWatch
Desk

CVE-2026-8069

8.5 high exploit SSVC exploitation: none Analyzed

PredatorSense version 3.00.3136 to 3.00.3196 contain Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named Pipe that uses a custom protocol to invoke internal functions. However, this Named Pipe is misconfigured, allowing any authenticated local user to execute arbitrary code with NT AUTHORITY\SYSTEM privileges and to delete arbitrary files with SYSTEM privileges. By leveraging this, an attacker can execute arbitrary code on the target system with elevated privileges.

Fix

Public exploits 1

Each line links to the index that lists it, never to exploit code. Exploit-DB's "verified" and a Metasploit rank of good or better count as verified; a PoC-in-GitHub entry is a repository's claim.

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 8.5 · acerNVD modified 2026-10-26 19:10

Affected (CPE criteria) 2

  • cpe:2.3:a:acer:nitrosense:*:*:*:*:*:*:*:*
  • cpe:2.3:a:acer:predatorsense:*:*:*:*:*:*:*:*

References 1